US 9,804,875 B2 · Software component and device for the automated processing of multi-purpose data, employing functions requiring different security levels or responsibility limits

Abstract

A software component for automated processing of multi-usage data, implementing functions requiring various levels of security or limits of responsibility. The software component includes a plurality of virtual machines, each virtual machine being adapted for executing at least one function requiring a level of security or a limit of responsibility which is predetermined and a hypervisor adapted for controlling execution of the plurality of virtual machines.

Drawings

Drawings are temporarily unavailable. Open the PDF at USPTO

Drawings

Claims16

Dependent claims

A system having a computer for automatic processing of multi-usage-data by a plurality of virtual machines (VM) including a first virtual machine and a second virtual machine, wherein each virtual machine of the plurality of virtual machines is for executing at least a predetermined one or more functions, wherein to execute the one or more functions the virtual machines are required to have various levels of security or limits of responsibility, the system comprising:

a local non-transitory memory and a non-transitory memory removable from the computer;
the plurality of virtual machines to automatically process a corresponding portion of the data from the multi-usage-data;
a hypervisor that runs on a hardware layer of the computer and controls running of the plurality of virtual machines;
the predetermined one or more functions include a data communication function and a data storage function, wherein:
for the data communication function that transmits data,
i. to an external system,
authenticating at least one of the virtual machines to be used for transmitting data by an authentication module of the hypervisor, and
verifying integrity and level of isolation of the at least one authenticated virtual machine in relation to at least one other virtual machine of the plurality of virtual machines;
or
ii. from the first virtual machine to the second virtual machine, when a level of security of the second virtual machine is higher than a level of security of the first virtual machine,
filtering data to be transferred as a function of a type of the data and only data that is needed by a data transfer module of the hypervisor, and
transmit data to the external system or to the second virtual machine after the verifying or the filtering;
for the data storage function that stores data processed by the at least one virtual machine of the plurality of virtual machines into one of the non-transitory memories,
storing the data processed by the at least one virtual machine in the local non-transitory memory or in the non-transitory memory removable from the computer as a function of a confidence level of the data processed by the at least one virtual machine, wherein the data is stored on the local non-transitory memory when the confidence level is above a predetermined security threshold.

11 more elements

A device having a computer for automatic processing of multi-usage-data by a plurality of virtual machines (VM) including a first virtual machine and a second virtual machine, wherein each virtual machine of the plurality of virtual machines is for executing at least a predetermined one or more functions, wherein to execute the one or more functions the virtual machines are required to have various levels of security or limits of responsibility, the device comprising:

a local non-transitory memory and a non-transitory memory removable from the computer;
the plurality of virtual machines to automatically process a corresponding portion of the data from the multi-usage-data;
a hypervisor that runs on a hardware layer of the computer and controls running of the plurality of virtual machines;
the predetermined one or more functions include a data communication function and a data storage function, wherein:
for the data communication function that transmits data,
i. to an external system,
authenticating at least one of the virtual machines to be used for transmitting data by an authentication module of the hypervisor, and
verifying integrity and level of isolation of the at least one authenticated virtual machine in relation to at least one other virtual machine of the plurality of virtual machines;
or
ii. from the first virtual machine to the second virtual machine, when a level of security of the second virtual machine is higher than a level of security of the first virtual machine,
filtering data to be transferred as a function of a type of the data and only data that is needed by a data transfer module of the hypervisor, and
transmit data to the external system or to the second virtual machine after the verifying or the filtering;
for the data storage function that stores data processed by the at least one virtual machine of the plurality of virtual machines into one of the non-transitory memories,
storing the data processed by the at least one virtual machine in the local non-transitory memory or in the non-transitory memory removable from the computer as a function of a confidence level of the data processed by the at least one virtual machine, wherein the data is stored on the local non-transitory memory when the confidence level is above a predetermined security threshold.

11 more elements

Dependencies are inferred from the claim text.

Description6,273 words

Summary1,174 words

#This invention relates to systems for processing of data, especially data of aircraft information systems, and more particularly to a software component and a device for the automated processing of multi-usage data, implementing functions requiring various levels of security or limits of responsibility.

#Ever since the tragic events of Sep. 11, 2001 linked to commercial airplane crashes, security has represented a basic problem for aeronautics. In order to respond to this, the manufacturers and the airline companies developed and integrated functions intended to improve security on board aircraft.

#Thus, by way of illustration, reinforced cockpit doors and internal video monitoring systems were developed. Likewise, the on-board systems from now on are protected against malicious intents.

Brief description of the drawings6 figures

#Other advantages, purposes and characteristics of this invention become apparent from the detailed description that follows, presented by way of non-limitative example, with reference to the attached drawings in which:

#FIG. 1 schematically shows an exemplary environment in which a system for automated processing of multi-usage data implementing the invention may be used;

#FIG. 2 illustrates an exemplary architecture of a system for automated processing of multi-usage data according to the invention;

Detailed description4,949 words

#The invention makes it possible in particular to replace the mobile or fixed systems for automated processing of data (STAD) that is mono-usage, currently used for the maintenance and mission, with a single secured, preferably mobile, STAD.

#FIG. 1 schematically shows an exemplary environment 100 in which a system for automatic processing of multi-usage data implementing the invention may be used. According to this example, a STAD 105 may be used by a crew member in an aircraft 110 for example to run flight management software operations.

#The same STAD 105, or a similar STAD 115, may be used by a maintenance crew to access maintenance data for aircraft 110 and/or to update data or software applications for the aircraft.

Facts

Application

13/387,561Filed 28 Jul 2010

Priority

FR 09 5528128 Jul 2009

Published

US 2012/0167089 A128 Jun 2012

Granted

31 Oct 2017

Term ends

30 Jan 2034

Estimated · how

20 years from earliest known nonprovisional domestic filing plus recorded patent term adjustment, including 1,282 days of adjustment. Maintenance-fee lapses, terminal disclaimers and statutory extensions have not been checked. The continuity chain may be incomplete; this is not an enforceability determination.

Classification7 codes

G06F 9/45558
Hypervisors; Virtual machine monitors: hypervisor-specific management and integration aspects
G06F 21/57
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: certifying or…
G06F 21/74
To assure secure computing or processing of information: operating in dual or compartmented mode, i.e. at least one secure mode
G06F 21/53
During program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow: by executing in a restricted environment, e.g.…

Timeline

28 Jul 2009Priority claimedFR 09 55281
28 Jul 2010Application filedUS 13/387,561
27 Jan 2012Assigned to Airbus (S.A.S.)assignment of assignor's interest
28 Jun 2012PublishedUS 2012/0167089 A1
31 Oct 2017GrantedUS 9,804,875 B2
12 Oct 2026TodayWithin its term
30 Jan 2034Term endsEstimated, includes 1,282 days of adjustment

Software component and device for the automated processing of multi-purpose data, employing functions requiring different security levels or responsibility limits

Life of this patent

Software component and device for the automated processing of multi-purpose data, employing functions requiring different security levels or responsibility limits

Life of this patent

Life of this patent

Abstract

Drawings

Drawings

Claims16

Description6,273 words

Drawings

Classification7 codes

Life of this patent

Description6,273 words